onionscan

Cos'è OnionScan? OnionScan è uno strumento gratuito e open source per investigare il Dark Web. Nonostante tutte le incredibili innovazioni tecnologiche nel campo dell'anonimato e della privacy, esiste sempre una minaccia costante che non ha una patch tecnologica efficace: l'errore umano. Che si...

witchcraft

🎉 Dein OPSEC-Begleiter. Führe witchcraft help oder witchcraft manual für das vollständige Handbuch aus. 🎉 Was macht es? WITCHCRAFT ist viel mehr als ein einfacher Alias, es ist ein Init-System, das mit Busybox arbeiten kann, eine Shell und eine Automatisierungs-Engine für Hacking, OSINT, Forensik...

PayloadAutomation

Cos'è Payload Automation? ================= Ora disponibile come pacchetto PyPi: https://pypi.org/project/payload-automation/ Payload Automation è una raccolta di classi Python che funge da ponte tra Sleep e Python, utilizzabile per automatizzare lo sviluppo di payload, i test, i controlli OPSEC ...

sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

sitrep

SitRep Erweiterbare, konfigurierbare Host-Triage. Zweck SitRep soll eine leichte, erweiterbare Alternative zur Host-Triage bieten. Prüfungen werden zur Laufzeit dynamisch aus eigenständigen Dateien geladen. Dies ermöglicht es Operatoren, bestehende Prüfungen schnell zu ändern oder bei Bedarf neue...

redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

The Hitchhikers Guide to Online Anonymity

La guida completa per l'anonimato online e l'OpSec. Benvenuti. Questa è una guida che mira a fornire un'introduzione a varie tecniche di tracciamento online, tecniche di verifica dell'identità online e una guida dettagliata per creare e mantenere identità online veramente anonime. È scritta con l...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

smbtakeover

smbtakeover Una tecnica per rimuovere e riassociare 445/tcp su Windows senza caricare un driver, caricare un modulo in LSASS o riavviare la macchina target. Implementata per semplificare il lavoro dei relay NTLM basati su SMB durante le operazioni via C2. L'analisi tecnica della tecnica è discuss...

moonwalk

moonwalk: DLL-Basisadressen-Finder Dieses Rust-Bibliotheks- und CLI-Tool demonstriert eine alternative Methode, um die Basisadresse geladener DLLs zu finden, ohne einen Prozess-Umgebungsblock PEB-Walk durchzuführen. Diese Technik ist besonders nützlich in Szenarien, in denen PEB-Walking erkannt...

OffSploit

OffSploit: Autonomous Exploit Adaptation & C2 Framework !Py...

nimrc 1.0.0

nimrm is a native WinRM interactive shell client written in Nim. It's designed to be a compact and fast tool for system administration and authorized security testing. Key features include NTLM and Kerberos authentication, in-memory operations, file transfers, OPSEC awareness, and cross platform...

EUVD-2000-0801

Malware in sbrugna...

OPSEC Failure Exposes Coquettte's Malware Campaigns on Bulletproof Hosting Servers

A novice cybercrime actor has been observed leveraging the services of a Russian bulletproof hosting BPH provider called Proton66 to facilitate their operations. The findings come from DomainTools, which detected the activity after it discovered a phony website named cybersecureprotect.com hosted...

EncryptHub’s OPSEC Failures Expose Its Malware Operation

Outpost24's KrakenLabs reveals EncryptHub's multi-stage malware campaign, exposing their infrastructure and tactics through critical OPSEC failures. Learn how…...

Styx Stealer Creator's OPSEC Fail Leaks Client List and Profit Details

In what's a case of an operational security OPSEC lapse, the operator behind a new information stealer called Styx Stealer leaked data from their own computer, including details related to the clients, profit information, nicknames, phone numbers, and email addresses. Styx Stealer, a derivative o...

LOLSpoof - An Interactive Shell To Spoof Some LOLBins Command Line

LOLSpoof is a an interactive shell program that automatically spoof the command line arguments of the spawned process. Just call your incriminate-looking command line LOLBin e.g. powershell -w hidden -enc ZwBlAHQALQBwAHIAbwBjAGUA.... and LOLSpoof will ensure that the process creation telemetry...

‘The Manipulaters’ Improve Phishing, Still Fail at Opsec

Roughly nine years ago, KrebsOnSecurity profiled a Pakistan-based cybercrime group called "The Manipulaters," a sprawling web hosting network of phishing and spam delivery platforms. In January 2024, The Manipulaters pleaded with this author to unpublish previous stories about their work, claimin...

DllNotificationInjection - A POC Of A New "Threadless" Process Injection Technique That Works By Utilizing The Concept Of DLL Notification Callbacks In Local And Remote Processes

DllNotificationInection is a POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes. An accompanying blog post with more details is available here: https://shorsec.io/blog/dll-notification-injection/ Ho...